Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: GKKZ/3ulkhEBOq2vkE7EzIAs6ph9JkqLlNjKdnuzC7w=
Subject key identifier: 30:40:1A:F1:CF:52:76:0A:D5:56:83:21:D1:4E:9D:E2:32:11:16:90
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019D273B014D8B6832C33E3980C03677D6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0C7F
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 19oQNl/klt3xBP/Iv3vYjfhOjOpo3+J/C8t9NqJW6Jo=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:01:4d:8b:68:32:c3:3e:39:80:c0:36:77:d6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=30401af1cf52760ad5568321d14e9de232111690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:f6:0a:a4:27:02:90:60:59:eb:53:41:cb:
1f:d0:23:85:74:a0:a0:03:ff:f4:52:06:40:cc:f5:
7e:26:a8:bb:f4:77:b0:db:f5:c8:e0:0a:0e:c3:2f:
ee:56:67:b8:b3:ce:00:b1:74:c6:fc:cb:39:24:81:
3c:b2:3d:ad:63:07:70:92:50:46:78:e4:a9:db:64:
b3:7b:8e:d3:d6:66:68:74:6d:f9:d6:66:98:ee:da:
4d:89:43:89:19:a3:42:61:11:b1:b6:48:8a:c9:2f:
02:9c:8c:f2:7a:65:25:79:6b:76:a7:bf:14:06:11:
af:fa:1d:4c:2e:6e:e2:60:68:5b:9b:da:93:f5:41:
65:46:64:5b:87:b8:b0:1a:93:3c:02:b8:4e:78:66:
5b:a8:d6:70:62:be:76:7a:17:87:2a:26:42:fb:52:
bf:e9:33:c8:87:d0:c3:5e:db:88:27:63:84:95:72:
24:75:b4:93:1f:6a:9c:a1:f0:f6:89:25:1c:0f:1c:
5c:24:dd:91:16:ad:db:37:8b:67:02:ed:b3:ad:47:
42:f1:be:b0:e5:7b:b7:0c:fb:c8:35:67:eb:21:0a:
66:8e:85:c9:52:6b:9c:88:5d:0c:e3:c4:9c:ee:72:
e9:5d:bf:7a:be:a4:8f:39:a7:b6:b9:7f:a7:8a:d3:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:1A:F1:CF:52:76:0A:D5:56:83:21:D1:4E:9D:E2:32:11:16:90
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:82:bf:fb:a6:ab:7c:96:90:cb:84:35:6c:c0:1c:da:7a:
b5:0d:fd:6e:48:b0:50:5f:fc:90:c3:66:32:aa:58:2b:bf:0f:
2f:6f:1f:29:52:c9:9b:b1:fa:af:23:a7:fd:3f:b0:c3:d2:bd:
e7:2d:51:f6:5c:f8:c5:da:83:da:ba:90:1d:fc:3f:05:c4:d2:
ea:74:06:ab:b4:15:94:62:67:63:ff:02:ef:5e:13:42:cb:97:
58:ab:cd:bf:49:47:70:37:82:6a:b0:31:c6:3b:1d:99:c4:88:
97:15:6b:12:e3:6d:ac:88:16:4d:81:b6:a5:6a:c7:4b:c9:a8:
37:4a:23:5a:4f:ba:fb:3d:48:f1:8a:2b:18:64:f7:6d:40:3c:
ac:55:a9:0e:76:52:b5:52:53:7b:2e:ea:c4:c4:30:a3:13:ac:
d6:3e:07:64:76:01:03:40:49:36:84:38:c0:22:63:77:41:4c:
50:ba:21:d0:aa:01:82:66:30:d6:26:fa:96:3b:f2:a0:d6:24:
3d:41:a1:c2:e6:fe:da:fe:28:9c:d0:7e:3e:d6:be:d0:df:bb:
6d:04:33:da:e6:23:82:6a:fa:d0:68:e5:55:96:30:5a:8c:9e:
49:d6:b1:6c:0d:d8:31:b0:0d:38:86:3f:bd:de:a9:e7:5b:c9:
38:7a:48:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOwFNi2gywz45gMA2d9bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjYwMzI1MjMwMTExWhcNMjYwMzI2MjMwMTExWjAzMTEwLwYDVQQD
EygzMDQwMWFmMWNmNTI3NjBhZDU1NjgzMjFkMTRlOWRlMjMyMTExNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFH2CqQnApBgWetTQcsf0COFdKCg
A//0UgZAzPV+Jqi79Hew2/XI4AoOwy/uVme4s84AsXTG/Ms5JIE8sj2tYwdwklBG
eOSp22Sze47T1mZodG351maY7tpNiUOJGaNCYRGxtkiKyS8CnIzyemUleWt2p78U
BhGv+h1MLm7iYGhbm9qT9UFlRmRbh7iwGpM8ArhOeGZbqNZwYr52eheHKiZC+1K/
6TPIh9DDXtuIJ2OElXIkdbSTH2qcofD2iSUcDxxcJN2RFq3bN4tnAu2zrUdC8b6w
5Xu3DPvINWfrIQpmjoXJUmuciF0M48Sc7nLpXb96vqSPOae2uX+nitNT+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBAGvHPUnYK1VaDIdFOneIyERaQMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjeCv/um
q3yWkMuENWzAHNp6tQ39bkiwUF/8kMNmMqpYK78PL28fKVLJm7H6ryOn/T+ww9K9
5y1R9lz4xdqD2rqQHfw/BcTS6nQGq7QVlGJnY/8C714TQsuXWKvNv0lHcDeCarAx
xjsdmcSIlxVrEuNtrIgWTYG2pWrHS8moN0ojWk+6+z1I8YorGGT3bUA8rFWpDnZS
tVJTey7qxMQwoxOs1j4HZHYBA0BJNoQ4wCJjd0FMULoh0KoBgmYw1ib6ljvyoNYk
PUGhwub+2v4onNB+Pta+0N+7bQQz2uYjgmr60GjlVZYwWoyeSdaxbA3YMbANOIY/
vd6p51vJOHpIrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:10 2026 by rpki-client